asyncrat | 48980f70da16b59927768b0e3a4d56c8c98e129f05f7f26b81847ffede708428 | Triage

Sharing

General

Target

48980f70da16b59927768b0e3a4d56c8c98e129f05f7f26b81847ffede708428.exe
Size

794KB
Sample

241009-lnvnxszdla
MD5

95a6d287978fa62ad30f26bae7aec73b
SHA1

759461ef978d1fc7d8a0571980b0065b51a61531
SHA256

48980f70da16b59927768b0e3a4d56c8c98e129f05f7f26b81847ffede708428
SHA512

4b2c702d64893804a803e4414ef22d4eaa8fbb95678d1b9011a46dd5c94fb7d1945cfe49a67dc345f6260f7ee23f4ca6601a60634e977b6b84ca9d02072c6003
SSDEEP

24576:JqmTmwgCof8IO6kh97pa66GbKHA+bEFymZtsnmPI9SflCE9:Jqm67CovO6kr7l9bsA3nfsng9CE

Score

10^/10

asyncrat execution rat

Malware Config

Targets

- Target
  
  48980f70da16b59927768b0e3a4d56c8c98e129f05f7f26b81847ffede708428.exe
- Size
  
  794KB
- MD5
  
  95a6d287978fa62ad30f26bae7aec73b
- SHA1
  
  759461ef978d1fc7d8a0571980b0065b51a61531
- SHA256
  
  48980f70da16b59927768b0e3a4d56c8c98e129f05f7f26b81847ffede708428
- SHA512
  
  4b2c702d64893804a803e4414ef22d4eaa8fbb95678d1b9011a46dd5c94fb7d1945cfe49a67dc345f6260f7ee23f4ca6601a60634e977b6b84ca9d02072c6003
- SSDEEP
  
  24576:JqmTmwgCof8IO6kh97pa66GbKHA+bEFymZtsnmPI9SflCE9:Jqm67CovO6kr7l9bsA3nfsng9CE
Score

10^/10

asyncrat execution rat
- AsyncRat
  AsyncRAT is designed to remotely monitor and control other computers written in C#.
  rat asyncrat
- Loads dropped DLL
- Command and Scripting Interpreter: PowerShell
  Run Powershell to execute payload.
  execution
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

asyncratexecutionrat